Resubmissions
17-10-2024 22:13
241017-142vhasglp 10General
-
Target
MediobancaToken.apk
-
Size
4.7MB
-
Sample
241017-142vhasglp
-
MD5
1150d0bf3a077be4f33eb487129d389a
-
SHA1
0fc8c1e2c08fd3dc83ceb72a4848c9aab66b7d57
-
SHA256
d852f48e1c8a37d11f9dfb90f339316a5a3fa012bf152db43de1e81b45a69ba7
-
SHA512
cd6d0097d67420d7596c3015f1b7ed777b42b7ac5b842f3107043bc3609fe3a2b391d7964d6262304ccc5255d51cbed0053a9e7e99ad350e85a1e838579cfa98
-
SSDEEP
98304:V9hinlhin6Vhinahinx1hin6hinshinUhinwFWKeUzE4b60sgPo8vI:VbCzC6DC8CxjCcCyCKCwFPecO0dhvI
Behavioral task
behavioral1
Sample
MediobancaToken.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
MediobancaToken.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
MediobancaToken.apk
Resource
android-x64-arm64-20240624-en
Malware Config
Targets
-
-
Target
MediobancaToken.apk
-
Size
4.7MB
-
MD5
1150d0bf3a077be4f33eb487129d389a
-
SHA1
0fc8c1e2c08fd3dc83ceb72a4848c9aab66b7d57
-
SHA256
d852f48e1c8a37d11f9dfb90f339316a5a3fa012bf152db43de1e81b45a69ba7
-
SHA512
cd6d0097d67420d7596c3015f1b7ed777b42b7ac5b842f3107043bc3609fe3a2b391d7964d6262304ccc5255d51cbed0053a9e7e99ad350e85a1e838579cfa98
-
SSDEEP
98304:V9hinlhin6Vhinahinx1hin6hinshinUhinwFWKeUzE4b60sgPo8vI:VbCzC6DC8CxjCcCyCKCwFPecO0dhvI
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-
Queries the mobile country code (MCC)
-
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Foreground Persistence
1Impair Defenses
1Prevent Application Removal
1Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Credential Access
Clipboard Data
1Input Capture
2GUI Input Capture
1Keylogging
1